$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json) Hash identifier: X5AxR6skTWTHLIFnXK9bN+3OciqE5ieYRPEKWPe+oyA= Subject key identifier: D1:3D:A4:FF:B8:67:5C:E6:4D:67:DE:47:97:E2:F7:FC:85:F5:FB:E7 Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 03CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft Manifest number: 03B8 Signing time: Sun 15 Jun 2025 00:26:07 +0000 Manifest this update: Sun 15 Jun 2025 00:26:06 +0000 Manifest next update: Sun 22 Jun 2025 00:26:06 +0000 Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: Npbd4uUBIvOOHHU/lTp+yAAnbDTC3H+K7zwQyKwGKXU=) 2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: PFHGyRpc2XbCpMP3oZwcoRFS7cS4eDGCTFH+DmvXr+c=) 3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: dmwskcX+7K87R4MLVSKhbA64Ib5h40ZpO651aHbL2xA=) 4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: 8Wa5zRD8JBVDnPrtDrMM10W+ePzBdP7fVD0dPyvthC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Validity Not Before: Jun 15 00:26:06 2025 GMT Not After : Jun 22 00:26:06 2025 GMT Subject: CN=684e131f-5e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:c3:8d:e5:ad:0b:e8:06:42:47:40:91:9f: 3b:70:83:d5:89:5b:07:81:b2:3a:a9:5a:23:d8:1c: 84:64:51:7b:c0:36:ac:a1:60:5a:2e:a5:61:7f:3f: d9:22:2f:c1:e8:38:13:93:9a:55:09:d5:09:7c:a6: 87:82:01:16:6b:93:32:9b:7b:f9:31:53:42:0c:84: 72:71:b0:c0:f5:16:ad:7e:1a:12:49:73:80:b4:c3: a1:cc:6d:5b:aa:ff:fe:ce:05:d0:ea:cf:7f:c6:ff: 68:95:57:ef:56:6d:ed:ce:0b:45:eb:fe:76:d9:1e: 66:b3:02:61:92:ac:bb:f3:66:d9:88:68:8a:1a:0c: 3e:02:7c:13:a7:4a:cc:d6:ac:ec:53:42:96:e1:2e: 24:b9:c7:4b:e3:08:f1:c1:36:0d:ea:c0:27:25:f0: 4a:2b:0f:fe:bb:5b:be:ba:a2:75:e7:42:88:1d:ad: a1:34:6f:bd:ad:41:45:e6:2a:e0:79:68:ba:19:1f: 7d:ea:96:74:49:1d:44:63:87:4f:6a:1c:f9:aa:de: 9d:64:28:6b:1e:2d:5a:fd:cd:03:2a:50:64:a1:f5: 42:4e:18:7f:9d:61:71:22:6e:d6:f9:34:23:5a:e3: 44:7a:53:e9:a3:57:4b:f5:86:ca:84:86:ce:f4:2e: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3D:A4:FF:B8:67:5C:E6:4D:67:DE:47:97:E2:F7:FC:85:F5:FB:E7 X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7c:37:0c:b3:60:c9:6f:44:7a:f9:0a:8d:0e:7b:c7:bf:e5: 15:e7:68:7d:d9:83:ec:06:9e:22:60:0d:22:cb:c8:a4:46:05: bb:b9:44:04:36:59:16:f0:5a:a9:c7:7a:ba:95:e2:c1:82:47: a4:65:df:ad:56:99:a8:8e:97:3e:2c:d5:ea:fd:97:26:61:0f: ca:87:de:4c:31:96:1f:f5:ec:a8:ed:e6:8d:d2:45:a3:91:14: f7:bc:ff:17:76:c6:5f:d1:4c:d1:58:f1:f3:0a:fd:e6:e4:d4: 54:b0:f8:0f:d0:79:6f:75:92:09:d5:29:e9:9f:33:f8:29:b4: b0:a0:8b:c6:f4:f0:c1:7b:d6:8c:61:13:dd:d2:d2:21:2e:68: be:66:52:df:30:b1:54:22:f0:cb:d4:28:71:03:c9:7a:88:db: 9a:3e:24:f4:5a:64:e4:d2:ae:c3:c0:c8:45:53:f9:ee:21:f5: 9f:81:37:55:34:42:b6:e4:42:ef:7f:50:d3:51:4d:a2:04:6d: 03:a4:3f:d2:f5:79:0d:d2:86:bf:54:f5:d5:7e:51:4e:12:1a: 5e:f7:01:b3:c1:73:49:c9:9d:b1:69:b7:1a:f7:e0:02:8b:fa: b5:62:7e:45:c2:98:05:d0:1d:d2:0d:58:13:a5:b5:5d:18:ab: ee:42:6f:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjUwNjE1MDAyNjA2WhcNMjUwNjIyMDAyNjA2WjAYMRYwFAYD VQQDEw02ODRlMTMxZi01ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03rDjeWtC+gGQkdAkZ87cIPViVsHgbI6qVoj2ByEZFF7wDasoWBaLqVhfz/Z Ii/B6DgTk5pVCdUJfKaHggEWa5Mym3v5MVNCDIRycbDA9RatfhoSSXOAtMOhzG1b qv/+zgXQ6s9/xv9olVfvVm3tzgtF6/522R5mswJhkqy782bZiGiKGgw+AnwTp0rM 1qzsU0KW4S4kucdL4wjxwTYN6sAnJfBKKw/+u1u+uqJ150KIHa2hNG+9rUFF5irg eWi6GR996pZ0SR1EY4dPahz5qt6dZChrHi1a/c0DKlBkofVCThh/nWFxIm7W+TQj WuNEelPpo1dL9YbKhIbO9C77hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNE9pP+4 Z1zmTWfeR5fi9/yF9fvnMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUYyRC9DRDZENkU1Njk4OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03 NFFhLXJ0My1uenVEUnROMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQfDcMs2DJb0R6+QqNDnvHv+UV52h92YPsBp4iYA0iy8ikRgW7uUQE NlkW8Fqpx3q6leLBgkekZd+tVpmojpc+LNXq/ZcmYQ/Kh95MMZYf9eyo7eaN0kWj kRT3vP8XdsZf0UzRWPHzCv3m5NRUsPgP0HlvdZIJ1SnpnzP4KbSwoIvG9PDBe9aM YRPd0tIhLmi+ZlLfMLFUIvDL1ChxA8l6iNuaPiT0WmTk0q7DwMhFU/nuIfWfgTdV NEK25ELvf1DTUU2iBG0DpD/S9XkN0oa/VPXVflFOEhpe9wGzwXNJyZ2xabca9+AC i/q1Yn5FwpgF0B3SDVgTpbVdGKvuQm/8 -----END CERTIFICATE-----Generated at Mon Jun 16 22:04:46 2025 by rpki-client